Method and system for tracking food safety data using hash trees

ABSTRACT

The present invention provides a method for tracking food data transactions in a network data processing system comprising the steps of reading a network storage devices a packaged food production data hash tree, receiving a food data transaction from a hardware data processor in a food packaging machine, appending the food data transaction to the packaged food production data hash tree, and causing decentralised storage of identical instances of the appended packaged food production data hash tree in the plurality of network storage devices. The present invention further provides a network data processing system and a computer program for carrying out the method.

1 FIELD OF THE INVENTION

This invention relates to a method and a system for tracking food safetydata. More specifically, this invention relates to a method and a systemfor tracking food safety data using hash trees.

2 BACKGROUND

Food safety is an increasingly important topic in the industrialproduction and packaging of food. In the event of a food safetyincident, such as a compromised package or contaminated food content, itis vital to have quick access to all food safety relevant data at hand.The data should be as precise as possible rendering it possible toidentify, as specifically as possible, all other packages that arepotentially affected by the same food safety incident. Finally, foodsafety relevant data should be tamper-proof in the sense that it shouldbe quick and easy to validate whether a given data set is authentic ornot.

In WO 2017/114666 A1, a method for quality control of a packaging systemis disclosed. The method comprises receiving a record of packagingidentification data, wherein the record of packaging identification databeing related to a package. Next, identifying and receiving a record ofmachine data using said record of packaging identification data, whereinsaid record of machine data being related to a machine set up used whenproducing said package. Thereafter, identifying a packaging qualityparameter to be checked based on said record of machine data, andrequesting a record of packaging quality data related to said packagingquality parameter.

Tracking food safety data is different from tracking quality data. Foodsafety is applicable along the entire product lifecycle from theproduction of the food through packaging, transportation and sale of thepackaged food, to the ultimate consumption of the food by consumer.Quality control of a packaging system is for all practical purposesrelevant to the producer of the package. In contrast thereto, foodsafety data concerns all entities associated with any portion of theproduct lifecycle. This includes without limitation the farmersproducing the food, entities processing or packaging the food, thedistributors and sellers of the packaged food, and the consumersdesiring to consume uncompromised safe food.

In US 2017/0262862 A1, a method for managing and providing provenance ofa product using blockchain technology is described. There is disclosureof the association to the product of a unique product identifier as wellas the optional association to the product of an anti-counterfeitingdevice also having a unique identifier as the product moves along thesupply chain from its source phase, through the transformation phase andundergoes the transportation phase. There may be more than one productidentifier or anti-counterfeiting device as the product is sometimesjoined, sometimes partitioned and sometimes packaged. To manage andfacilitate the generation and association of identifiers as the productmoves along the supply chain there is a data memory device for storageof the unique identifier for the product and association by the serverin the data memory device of the unique identifier for the product withthe unique identifier of the anti-counterfeit device and otherassociations. The server is also adapted to receive and store in thedata memory device one or more characteristics of the product existingor created as the product moves along the supply chain. Receipt by theprocessor of the unique identifier of a product or anti-counterfeitdevice with a query for the provenance of the product, makes availableat least one characteristic associated with that product. The use ofblockchain permits the creation of a block for each recordedcharacteristic and the retrieval of the record associated with a blockand to verify that the recorded characteristic is the same as thatretrieved from the block in the blockchain uniquely associated with theparticular product.

It is an object of the present invention to overcome the technicalproblems and limitations faced by the prior art methods, computerprograms, and devices.

3 SUMMARY OF THE INVENTION

It is a specific object to provide a method for tracking food datatransactions in a network data processing system that allows recordingfood safety relevant data in a tamper-resilient and for all practicalpurposes tamper-proof way.

It is another specific object of the present invention to provide amethod for tracking food data transactions in a network data processingsystem that allows recording tamper-resilient food safety relevant datain an efficient way that reduces the amount of data to be transmittedover network connections.

To solve these objects a method for tracking food data transactions in anetwork data processing system according to claim 1 is provided.

It is one specific object of the present invention to provide a networkdata processing system that allows recording food safety relevant datain a tamper-resilient and for all practical purposes tamper-proof way.

It is another specific object of the present invention to provide anetwork data processing system that allows recording tamper-resilientfood safety relevant data in an efficient way that reduces the amount ofdata to be transmitted over network connections.

To solve these objects network data processing systems according toclaim 15, claim 17, and claim 18, as well as a computer programscomprising instructions according to claim 16 are provided.

Still other objectives, features, aspects and advantages of theinvention will appear from the following detailed description as well asfrom the drawings.

4 BRIEF DESCRIPTION OF THE FIGURES

In FIG. 1, an exemplary embodiment of a method for tracking food datatransactions in a network data processing system according to thepresent invention is shown.

In FIG. 2, an exemplary embodiment of a method for tracking food datatransactions in a network data processing system according to thepresent invention is shown.

In FIG. 3, an exemplary embodiment of a method for tracking food datatransactions in a network data processing system according to thepresent invention is shown.

In FIG. 4, an exemplary embodiment of a method for tracking food datatransactions in a network data processing system according to thepresent invention is shown.

In FIG. 5, an exemplary embodiment of a method for tracking food datatransactions in a network data processing system according to thepresent invention is shown.

In FIG. 6, an exemplary embodiment of a method for tracking food datatransactions in a network data processing system according to thepresent invention is shown.

In FIG. 7, an exemplary embodiment of a network data processing systemaccording to the present invention is shown.

In FIG. 8, an exemplary embodiment of a network data processing systemaccording to the present invention is shown.

In FIG. 9, an exemplary embodiment of a network data processing systemaccording to the present invention is shown.

In FIG. 10, an exemplary embodiment of a network data processing systemaccording to the present invention is shown.

In FIG. 11, an exemplary embodiment of a network data processing systemaccording to the present invention is shown.

In FIG. 12, an exemplary embodiment of a network data processing systemaccording to the present invention is shown.

5 DETAILED DESCRIPTION

In one aspect, the present invention relates to a method for trackingfood data transactions in a network data processing system.

The network data processing system is operably connected to a hardwaredata processor in a food packaging machine. The food packaging machinecomprises a packaging material supply module, a food supply module, anda filling module. The filling module is operable to form a package frompackaging material supplied by the packaging material supply module, tofill food supplied by the food supply module into the package, to sealthe filled package, and to output the sealed, formed, and filledpackage. The network data processing system is further operablyconnected to a plurality of separate network storage devices.

The method for tracking food data transactions in a network dataprocessing system according to the present invention comprises the stepsof the network data processing system reading from one of the networkstorage devices a packaged food production data hash tree, receiving afood data transaction from the hardware data processor, appending thefood data transaction to the packaged food production data hash tree,and causing decentralised storage of identical instances of the appendedpackaged food production data hash tree in the plurality of networkstorage devices.

The food data transaction is derived from data comprising a time stampindicative of the time at which the filling module filled the suppliedfood into the formed package and then sealed the package, a machine datarecord identifying the filing module or the food packaging machine, allor part of a packaging material data record indicative of the packagingmaterial batch using which the formed package is formed, and all or partof a food data record indicative of the food batch filled into theformed package.

As used herein, “network data processing system” refers to a dataprocessing system comprising a hardware processor that is operable tosend data to and to receive data from other entities comprising ahardware processor through a network connection established between thenetwork data processing system and the other entity.

As used herein, the term “food data transaction” refers to data derivedfrom data comprising all or part of the food data record and all or partof the packaging material data record. The food data transaction may bederived from data comprising all or part of a plurality of correspondingpairs of food data record and the packaging material data record. Thefood data transaction may comprise data derived from a food processingdata record. The food data transaction may be digitally signed by thehardware processor creating it. The data from which the food datatransaction is derived may further comprise data relating to an earlierfood data transaction created on the same food packaging machine. Thedata from which the food data transaction is derived may furthercomprise data received from an external entity such as a network dataprocessing system. The digital signature verifies the data content ofthe data transaction in its entirety. The digital signature may beeffected by a creating a cryptographic hash value of all or part of thedata records. The digital signature may further be effected by acreating a cryptographic hash value of each individual food data recordwithin the transaction all or part of the food data records and thencreating a cryptographic hash value of the combination of one, some, orall cryptographic hash values of the individual data records. The fooddata transaction may take the form of a hash tree of the individual fooddata records. The food data transaction may consist of the top hashvalue of the hash tree created from the individual food data records.The term “food” as used herein refers to any product that is intendedfor consumption by a human or an animal including without limitationedible food, beverages, and medicaments. Food can be raw or processed.The consumption maybe orally or through any other method delivering theproduct into the body of the consuming human or animal. The food may beliquid. The food may be a liquid containing particulates. The food maybe viscous. The food may be solid. The food may be pourable.

The food packaging machine comprises a packaging material supply module.As used herein, the term “packaging material supply module” refers toany module of a food packaging machine that is operable to supplypackaging material to the filling module. The packaging material can besupplied in various ways. The packaging material may be supplied as acontinuous material such as a web material which is subsequently, eitherbefore or after filling, severed into pieces for forming individualcontainers. Alternatively, the packaging material may be supplied in theform of individual such as blanks from which one package or a group ofpackages can be formed. The packaging material can be supplied in theform of a ready-to-fill container such as a bottle. The packagingmaterial can be supplied in the form of a preform that is subsequentlytransformed into the final package shape through a moulding process suchas stretch-blow moulding. As used herein, the term “packaging material”refers to any material or combination of materials that is suitable forcontaining food in a sealed package made from the packaging material.The packaging material may be suitable for protecting the food fromundesirable interactions with the environment such as contamination,light exposure, or oxidization. Suitable packaging materials includewithout limitation paper, modified paper (such a grease paper), paperboard, metal (such as aluminium), polymeric materials (such aspolyethylene, polypropylene, polyesters, PET, polystyrene,polycarbonates), and glass. Suitable packaging materials further includewithout limitation combinations of the aforementioned packagingmaterials such as laminated packaging materials comprising layers of anyof the aforementioned materials. Laminated packaging materials maycomprise a core layer of paper board. The core layer of the laminatedpackaging material may comprise cellulose fibres. Laminated packagingmaterials may comprise polymeric layers (such as polyethylene layers) onthe inner and outer surfaces of the paper board to increase liquidimperviousness of the material. The laminated packaging material mayfurther comprise an additional layer such as a metal foil layer toreduce oxygen transmission through the material. The additional layermay be positioned in between the inner surface of a paper board and aninner polymer layer.

The food packaging machine comprises a food supply module. As usedherein, the term “food supply module” refers to any module of a foodpackaging machine that is operable to supply food to a filling modulewhere the food is filled into the package. The food can be supplied inas a continuous flow of fluid or viscous product such as a beverage. Therate at which this continuous flow is controlled can be through a valveor a nozzle. The rate can be measure such as by measuring weight orvolume with suitable sensors. Alternatively, the food can be provided inthe form of discrete portions or items such as ice cream bars orconfectionary.

The food packaging machine further comprises filling module. As usedherein, the term “filling module” refers to any food packaging machinemodule that is operable to receive food from a food supply module, toreceive packaging material from a packaging material supply module, tofill the received food into the packaging material, and to seal thepackage filled with the food. The seal may be intended not be openeduntil the consumer opens the package for consumption of the packagedfood. An unbroken seal and package may thus indicate to the consumerthat the package has been containing the food in uncompromised formsince the packaging of the food. The filling module may be operable toform a formed package from the packaging material supplied by thepackage material supply module. Various different ways of forming apackage are known in the art. The step of forming a package may be assimple as bringing the packaging material received from the packingmaterial supply module into a position and orientation for being filled.Another way of forming a package is to form a tube by longitudinallysealing one longitudinal edge of a supplied web packaging material tothe other longitudinal edge. The food, such as liquid food, may then befilled into the vertically arranged tube. Individual packages may thenbe formed by transversally sealing and cutting the tube. The individualpackages may then be further formed by folding into the desired shapesuch as cuboid shaped packages. The forming step may further comprisefolding over the flaps and attaching it to the main body of the package.Another way to form a package is to create a sleeve from packagingmaterial which is then closed on one end, either the top or the bottom,to form a half-open blank. The food may then be filled into thehalf-open blank, after which the other end of the blank may be sealed toform a sealed package. The sleeve or the sealed package may be reformedthrough folding to bring the sealed package into the desired shape.Alternatively, the filling module may receive from the packagingmaterial supply module a preformed package such as a preform and maytransform the preform into a ready-to-fill package such as bystretch-blow moulding. The filling module may also receive from thepackaging material supply a ready-to-fill package comprising acontainer, such as a bottle, having an opening to be filled. The openingof the ready-to-fill container may be the same opening through which theconsumable food will be emptied from the final package or it may be adifferent opening which may be permanently sealed after filling the foodinto the package. The filling module may be operable to seal the filledpackage such as by sealing the packaging material. The filled packagemaybe hermetically sealed so that the packaged food cannot be accessedfrom the outside without opening the package. The sealing of filledcontainer may be achieved by applying a reopenable closure such as a capor by applying a non-reopenable closure such as a tear-off foil over theopening. The applied closure may comprise a tamper evidence feature. Thefilling module may be operable to output the sealed, formed, and filledpackage. The package may be output to further downstream equipment, suchas downstream equipment for processing the packaged food (such as aretort or a pasteurizer) for packaging a plurality of sealed packagesinto a bundle wrapped by secondary packaging.

The food packaging machine may further comprise a food processingmodule. As used herein, the term “food processing module” refers to anymodule in the food packaging machine that affecting the composition,consistency, or state of the food. The food processing module may bearranged upstream of the food supply module, may be integrated with thefood supply module, or may be arranged downstream of the filling module.Many food suitable food processing modules are known in the artincluding with limitation mixers, blenders with and without blades,filtration modules, heaters, coolers, curing tunnels, baking ovens,pasteurizers, retorts, and the like. The food processing module maycomprise sensors for measuring operating parameters relevant for foodsafety. The food processing module may comprise storage means for savingthe measured parameters.

The food packaging machine further comprises a hardware data processor.The term “hardware processor” or “hardware data processor” as usedherein refers to electronic circuitry that is operable to carry out theinstructions of a computer program. Such instructions include withoutlimitation instruction to perform, on a basic level, arithmetic,logical, control and input/output (I/O) operations. The hardwareprocessor may comprise a volatile or permanent memory for storingcomputer program instructions and for storing data. The hardwareprocessor may comprise a microprocessor which incorporates the functionsof a computer's central processing unit (CPU) on a single integratedcircuit or at most a few integrated circuits. The microprocessor may bea multipurpose, clock driven, register based, digital-integrated circuitwhich accepts binary data as input, processes it according toinstructions stored in its memory, and provides results as output.Microprocessors contain both combinational logic and sequential digitallogic. Microprocessors operate on numbers and symbols represented in thebinary numeral system. The hardware processor may be configured to beconnected to a data bus for exchanging data with other hardwareprocessors or other storage devices. Such connection may be wired orwireless. The terms “hardware processor” and “hardware data processor”are used interchangeably in the present disclosure.

The hardware processor of the food packaging machine may be operablyconnected to the packaging material supply module to receive a packagingmaterial data package record indicative of the packaging material batchcurrently supplied to the filling module. The packaging material supplymodule may comprise a hardware processor which is operably connected toa sensor which is sensing a property of the packaging material currentlysupplied by the packaging material supply module to the filling module.The sensor may be sensor configured for reading a one-dimension opticalcode (such as a barcode) or a two-dimensional optical code (such as a QRcode) from the outer surface of the packaging material. The hardwareprocessor may be connected to a user input terminal where the operatorcan input information identifying the packaging material currentlysupplied by the packaging material supply module to the filling module.The hardware processor may be configured to create a packaging materialdata record which includes information indicative of the packagingmaterial batch currently supplied to the filling module. The hardwareprocessor may further be configured to append further information to thepackaging material data record including without limitation a timestamp, location information, a unique identifier of the packagingmaterial supply module such as a digital signature, additionalinformation relating to any of the components of the packaging material,other information relating to the current status of the packagingmaterial supply module such as temperature, humidity, time of continuousoperation, aseptic status, current running speed, operator identity, orother operational parameters. Such information may be retrieved by thehardware processor from a connected memory, from a user input terminal,or from other data sources to which the hardware processor is connectedthrough a data network. The operable connection between the hardwareprocessor and the packaging material supply module may be direct orindirect. An indirect connection may be achieved by operably connectingthe packaging material supply module with the filling module and thefilling module with the hardware processor.

The hardware processor of the food packaging machine may be operablyconnected to the food supply module to receive a food data recordindicative of the food batch currently supplied to the filling module.The food supply module may comprise a hardware processor which isoperably connected to a sensor which is sensing a property of the foodbatch currently supplied by the food supply module to the fillingmodule. The sensor may be a sensor configured for reading aone-dimension optical code (such barcode) or a two-dimensional opticalcode (such as QR code) from the outer surface of the container in whichthe food was supplied to the food supply module. The hardware processormay be connected to a user input terminal where the operator can inputinformation identifying the food batch currently supplied by the foodsupply module to the filling module. The hardware processor may beconfigured to create a food data record which includes informationindicative of the food batch currently supplied to the filling module.The hardware processor may further be configured to append furtherinformation to the food data record including without limitation a timestamp, location information, a unique identifier of the food supplymodule such as a digital signature, additional information relating toany of the ingredients of the food batch (such as time and place ofproduction, time and mode of transportation from the place of origin),other information relating to the current status of the food supplymodule such as temperature, humidity, time of continuous operation,aseptic status, current running speed, operator identity, or otheroperational parameters. Such information may be retrieved by thehardware processor from a connected memory, from a user input terminal,or from other data sources to which the hardware processor is connectedthrough a data network. The operable connection between the hardwareprocessor and the food supply module may be direct or indirect. Anindirect connection may be achieved by operably connecting the foodsupply module with the filling module and the filling module with thehardware processor.

The hardware processor of the food packaging machine may be operablyconnected to a food processing module comprised in the food packagingmachine. The hardware processor may receive a food processing datarecord indicative of at least one operational parameter of the fillingmodule. Suitable parameters include without limitation a uniqueidentifier for the food processing module, temperature, aseptic status,speed of operation, location of the food processing module, time anddate of current operation, elapsed time of operation since laststart-up, and volume or weight of food processed since last start-up.

The hardware processor of the food packaging machine is operable tocreate a food data transaction relating to a time stamp identifying thetime at which the filling module filled the supplied food into theformed package, a machine data record identifying the filling module orthe food packaging machine, all or part of the packaging material datarecord, and all or part of the food data record. The food data recordmay further relate to all or part of the optional filling data record.Alternatively, the hardware processor of the food packaging machine isoperable to create a food data transaction comprising a plurality offood data records wherein each such data record comprises the abovedata.

The food packaging machine may comprise a local storage device forstoring food data records. The local storage device may be operablyconnected to the hardware data processor of the food packaging machine.In cases where a data transaction does not comprise the full data of thefood data records it relates to, then it is possible to obtain theunderlying data from local storage device and to verify accuracy byrecreating the food data transaction and comparing it with the earlierfood data transaction such as by comparing their hash values. The localstorage device may form part of the food packaging machine or may belocated at a separate location connected to the food packaging machinethrough a wired or wireless network connection.

The hardware processor of the food packaging machine is operablyconnected to a network data processing system through a networkconnection. As used herein, the term “network connection” refers to aconnection between to separate entities, each comprising a hardwareprocessor, over which data, such as digital data, can be sent andreceived. The network connection maybe be a wired connection (such as awide area network based on the Ethernet protocol), a wireless networkconnection (such as a wireless area network) or a combination of wiredand wireless. The network data processing system is physically separatefrom any entity to which it is connected through a network connectionand is preferably located at a separate location from at least one ofthe connected entities.

The network data processing system is operably connected to a pluralityof separate network storage devices for storing decentral instances of adata hash tree. As used herein, the term “network storage device” refersto a data processing system comprising a hardware processor and apermanent memory for storing information. The network storage device isoperable to receive data through a network connection from anotherentity comprising a hardware processor such as a network data processingsystem. The network storage device may be operable to read data from itspermanent memory and to send such data through a network connector toanother entity such as a network data processing system or a networkstorage device. The network storage device is physically separate fromany entity to which it is connected through a network data connectionand is preferably located at a separate location from at least one ofthe connected entities.

The method for tracking food data transactions in a network dataprocessing system comprises a step of the network data processing systemreading from one of the network storage devices a packaged foodproduction data hash tree. As used herein, the term “hash tree” refersto a data structure in the form of a tree in which every node except theinitial nodes has one or more predecessor nodes and is labelled with thecryptographic hash of the labels of one, more than one, or allpredecessor nodes. Hash trees with many nodes having more than onepredecessor node (such as for example Merkle trees) allow efficient andsecure verification of the contents of large data structures. The hashtree may comprise a top node which has been derived by creating one ormore generations of hash values of the initial nodes (data nodes). Thetop node of a hash tree is the only node which has not been subjected tothe creation of a further hash value. The hash tree may be a hash listin which one node (the top hash) is labelled with the cryptographic hashof the labels of all other nodes (the list of hashes). The hash tree maybe a hash chain in which each node has exactly one predecessor node andis labelled with the cryptographic hash of the label of its predecessornode. Preferably, the hash tree is secure in accordance with the SecureHash Standard (SHS) issued by the Information Technology Laboratory ofNational Institute of Standards and Technology (U.S. Department ofCommerce, FIPS PUB 180-4, August 2015) available athttp://dx.doi.org/10.6028/NIST.FIPS.180-4. As used herein, the term“hash function”, refers to any function that can be used to map data ofarbitrary size (“message”) to data of fixed size (“value”). The valuesreturned by a hash function are called hash values, or just hashes. Asused herein, the term “cryptographic hash” as used herein refers to ahash returned by a cryptographic hash function. As used herein, the term“cryptographic hash function” refers to a special class of hashfunctions which is configured to be difficult to invert. A cryptographichash function may be deterministic, so the same message always resultsin the same hash. A cryptographic hash function may be configured toallow for quick computation of the hash value for any given message. Acryptographic hash function may be configured such that it ispractically infeasible to generate a message from its hash value exceptby trying all possible messages. A cryptographic hash function may beconfigured such that a small change to a message should change the hashvalue so extensively that the new hash value appears uncorrelated withthe old hash value. A cryptographic hash function may be configured suchthat it is practically infeasible to find two different messages withthe same hash value. A variety of suitable cryptographic hash functionsis known in the art including without limitation MDS, SHA-0, SHA-1,SHA-2 (including variants), SHA-3 (including variants), SHAKE128, SHAKE256, BLAKE, BLAKE2, and sponge functions (including the Keccak spongefunctions). As used herein, the term “packaged food production data hashtree” refers to a hash tree which comprises data transactions whichrelate to the production of packaged food. The packaged food productiondata hash tree may comprise a plurality of individual data transactionseach relating to food data records in which the individual datatransactions have been created on a plurality of food packagingmachines. The packaged food production data hash tree may comprise afirst plurality of individual data transactions each relating to fooddata records created by the hardware processor of a first food packagingmachine together with a second plurality of individual data transactionseach relating to food data records created by the hardware processor ofa second food packaging machine whereby the first and second foodpackaging machines may be located in the same plant or at differentplants at separate locations.

The packaged food production data hash tree may have the form of hashtree in which the food data transactions received by the networkprocessing system form the initial nodes. The network processing systemmay create a hash value of the received food data transactions,optionally of the received food data transaction in conjunction with atime stamp of the time of receipt by the network processing system or aunique identifier of the network processing system or in conjunctionwith both. The packaged food production data hash tree may comprisenodes which relate to a subset of the received food data transactionsuch as for those food data transactions received during a certain timeinterval or for those received from the same food packaging machine.Such nodes may be created by computing a hash value of the accumulatedfood data transactions. The packaged food production data hash tree maycomprise further nodes which are created by computing a hash valuerelating to the cumulative subset of nodes which relate to a subset offood data transactions. The food data transaction has tree may comprisea top node. A new top node of the food data transaction hash tree may beobtained by computing a hash value relating to previous top node and tothe cumulative food data transactions received since the creation of theprevious top node. The food data transaction hash tree may comprise atime sequence of top hash nodes in the form of a hash list in which thelatest top node is labelled with the hash values of one or more previoustop nodes.

The method for tracking food data transactions in a network dataprocessing system comprises a step of the network data processing systemreceiving a food data transaction from the hardware data processor. Thereceipt of the food data transaction may occur at periodic timeintervals or alternatively may occur at irregular or randomly chosentime intervals. The method may comprise a step of the network dataprocessing device sending a request to the hardware processor requestinga food data transaction the be prepared and sent by the hardwareprocessor to the network data processing system. The food datatransaction may comprise a time stamp indicative of the time at whichthe filling module filled the supplied food into the formed package andthen sealed the package, a machine data record identifying the filingmodule or the food packaging machine, all or part of a packagingmaterial data record indicative of the packaging material batch usingwhich the formed package is formed, and all or part of a food datarecord indicative of the food batch filled into the formed package.

The method for tracking food data transactions in a network dataprocessing system comprises a step of the network data processing systemappending a received food data transaction to the packaged foodproduction data hash tree of data. The food data transaction may beappended to the food production data hash tree in accordance with thepredefined format of the food production data hash tree. The step ofappending a food data transaction to the food production data hash treemay comprise the step of creating a hash value of the received food datatransactions, optionally of the received food data transaction inconjunction with a time stamp of the time of receipt by the networkprocessing system or a unique identifier of the network processingsystem or in conjunction with both. The step of appending a food datatransaction to the food production data hash tree may comprise the stepof creating a hash value of the received food data transactions andstoring the hash value of the received food data transaction togetherwith a time stamp of the time of receipt by the network processingsystem in a local storage device associated with the network dataprocessing system. For verifying the food data records of a certain foodpackaging machine, it is thus possible to compare the hash values of thefood data transactions received from that machine with the locally savedvalues and to recreate the entire or a portion of the food productiondata hash tree to compare with the previously saved version.

The method for tracking food data transactions in a network dataprocessing system may comprise a step of the network data processingsystem sending to the hardware processor of the connected food packagingmachine a data record derived from the data currently present in thenetwork data processing system. Such data may in turn be included by thehardware processor in the food packaging machine when creating thesubsequent food data transaction. The data record sent to each foodpackaging machine operably connected with the network data processingsystem may be identical or different. The data record sent to a firstfood packaging machine may be derived from data comprising data relatingto at least one other food packaging machine, preferably a plurality ofor all other operably connected food packaging machines.

The method for tracking food data transactions in a network dataprocessing system may comprise a step of the network data processingunit system causing decentralised storage of identical instances of theappended packaged food production data hash tree of data in theplurality of network storage devices. The plurality of network storagedevices may be located at different locations, preferably each networkstorage device at a different location. Keeping the network storagedevices at different locations renders it very unlikely that all networkstorage devices are physically destroyed at the same time or by the sameincident. Keeping the network storage devices at different locations mayfurther allow the network storage devices to be individually accesscontrolled (physically and electronically) by separate independententities making it hard to gain control over all the network storagedevices in an attempt to tamper with the packaged food production datahash tree. To verify that the uncompromised packaged food productiondata hash tree, the packaged food production data hash trees saved onall network storage devices may be compared. The verification may beachieved by comparing hash values comprised in the nodes of the tree.

With reference to the exemplary embodiment of the method shown in FIG.1, the method 1000 for tracking data in a food packaging machinecomprises the step 1010 of the network data processing system readingfrom one of the network storage devices a packaged food production datahash tree. The method comprises the step 1020 of the network dataprocessing system receiving a food data transaction from the hardwaredata processor. The food data transaction comprises a time stampindicative of the time at which the filling module filled the suppliedfood into the formed package and then sealed the package, a machine datarecord identifying the filing module or the food packaging machine, allor part of a packaging material data record indicative of the packagingmaterial batch using which the formed package is formed, and all or partof a food data record indicative of the food batch filled into theformed package. The method comprises the step 1030 of the network dataprocessing system appending the food data transaction to the packagedfood production data hash tree. The method comprises the step 1040 ofthe network data processing system causing decentralised storage ofidentical instances of the appended packaged food production data hashtree in the plurality of network storage devices.

The method for tracking food data transactions in a network dataprocessing system may comprise a step of the network data processingdevice reading from a further network storage device, and optionallyfrom further network storage devices, a second packaged food productiondata hash tree. The method may then comprise a step of the network dataprocessing system comparing the first packaged food production data hashtree received from a first network data storage device with a secondpackaged food production data hash tree received from a second networkdata storage device. Such comparison may be carried out by comparing thecryptographic hashed of the received packaged food production data hashtrees. The method may then comprise a step of the network dataprocessing system outputting a warning in case it is determined that thefirst packaged food production data hash tree is not identical with thesecond packaged food production data hash tree.

The method may then comprise a step of the network data processingsystem initialising a packaged food production data hash tree in case nopreviously existing packaged food production data hash tree has beenstored on the network storage device.

In another aspect, the present invention provides a method for trackingfood data transactions in a network data processing system wherein thefood data transaction is further derived from data comprising all orpart of a filling data record, the filling data record being indicativeof at least one operational parameter of the filling module duringfilling the supplied food into the formed package.

The hardware processor of the food packaging machine may be operablyconnected to the filling module to receive a filling data recordindicative of at least one operational parameter of the filling module.Suitable parameters include without limitation a unique identifier forthe filling module, temperature, aseptic status, speed of operation,location of the filling module, time and date of current operation,elapsed time of operation since last start-up, number of packagesproduced since last start-up, and volume or weight of food packagedsince last start-up. The filling data record may comprise part or all ofeither of the packaging material data record or the food data record orof both data records.

In another aspect, the present invention provides a method for trackingfood data transactions in a first network data processing system whereinthe packaged food production data hash tree is a distributed ledger.

As used herein, the term “distributed ledger” refers to a packaged foodproduction data hash tree that is shared, replicated, and synchronizedamong the network storage devices. The distributed ledger records thefood data transactions among the network storage devices. The one ormore network data processing means may govern and agree by consensus onthe updates to the records in the packaged food production data hashtree. Every record in the distributed packaged food production data hashtree may have a timestamp and unique cryptographic signature, thusmaking the ledger an auditable history of all food data transactions inthe network. One among many suitable implementations of distributedledger technology known in the art is the open source Hyperledger Fabricblockchain.

A method for tracking food data transactions in a network dataprocessing system wherein the packaged food production data hash tree isa blockchain. As used herein, the term “blockchain” refers to a packagedfood production data hash tree that is shared, replicated, andsynchronized among the network storage devices and which comprisesblocks of data. Each block of data comprises at least a first food datatransaction from a first food packaging machine and a second food datatransaction from a second food packaging machine. Each block may includea cryptographic hash of its entire data content. By mixing data frommore than one food packaging machine, preferably from a large number offood packaging machines, creating a cryptographic hash of the cumulativedata increases the difficulty to alter the packaged food production datahash tree retroactively. The blockchain used for the present inventionmay be a public blockchain where any party can set up a network dataprocessing system or a network data storage system and participate inmaintaining and governing the packaged food production data hash tree.The blockchain used for the present invention may be a privateblockchain where the parties who can run a network data processingsystem or a network data storage system and participate in maintainingand governing the packaged food production data hash tree are centrallydetermines. One advantage of a private blockchain is that the identityof each party participating in the blockchain can be verified prior togranting access to the blockchain and that the compliance of eachparticipant can be tracked.

A method for tracking food data transactions in a network dataprocessing system wherein the packaged food production data hash tree isa semi-public blockchain.

As used herein, the term “semi-public blockchain” refers to a blockchainin which permission to participate in the blockchain by running anetwork data processing system or a network data storage system aregranted access based on pre-defined criteria. To maintain the integrityof the packaged food production data hash tree, it is desirable to allowa large number of participants in the blockchain to render it harder tomodify the packaged food production data hash tree with maliciousintent. Food packaging machines generally do not operate continuouslybut need to be shut down in regular intervals for cleaning ormaintenance. Food packaging machines sometime undergo unscheduled stopswhen machine parts fail. In a semi-public blockchain, it may be possibleto join as participant as well as to terminate participation while theblockchain is running. One advantage of a semi-private blockchain isthat the identity of each party participating in the blockchain can beverified prior to granting access to the blockchain and that thecompliance of each participant can be tracked. In the semi-privateblockchain of the present invention, the implementation of theblockchain may be controlled by one entity such as by setting the rulesof governance and participation and by granting the right to participateto other entities. In the semi-private blockchain of the presentinvention, the number and identities of the blockchain participants maybe tracked for each block of the blockchain.

In another aspect, the present invention provides a method for trackingfood data transactions in a network data processing system wherein themethod further comprises the step of the network data processing systemverifying all or part of the food data transaction received fromhardware data processor with a second food data transaction comprised inthe packaged food production data hash tree read from the networkstorage device.

The network data processing device has access to the entire packagedfood production data hash tree and thus to prior food data transactionswhich have been appended to the packaged food production data hash treeat an earlier point of time. For example, an aspect of the production ofthe food batch or of the packaging material batch may have been appendedas separate food data transaction to the packaged food production datahash tree. As a step of added scrutiny, the network data processingsystem may thus verify all or part of the newly receive food datatransaction with data comprised in the earlier food data transactionsuch as by comparing the cryptographic hashes.

With reference to the exemplary embodiment of the method shown in FIG.2, the method 2000 now comprises, in comparison to method 1000 shown inFIG. 1, the additional step 2050 of the network data processing systemverifying all or part of the food data transaction received fromhardware data processor with a second food data transaction comprised inthe packaged food production data hash tree read from the networkstorage device. The additional step 2050 may be carried after step 1020of the network data processing system receiving a food data transactionfrom the hardware data processor. The additional step 2050 may becarried prior to step 1030 of the network data processing systemappending the food data transaction to the packaged food production datahash tree.

The food data comprised in the food data transaction may comprise atransaction stored in the food production data hash tree and the machinedata processing unit may be operable to verify the food data packagewith the food production data hash tree hash tree before creating thefood data transaction. To keep the data content of the food productiondata hash tree as complete and traceable as possible, it is advantageousthat the hash tree further comprises data transactions relating to thefood safety relevant events from the food product lifecycle of the foodfilled into the package by the food packaging machine. As used herein,the term “data transactions relating to the food safety relevant events”refers to any data transaction that comprises data from any event fromthe first production of any component of the food to the filling of foodinto the package in the food packaging machine. Such data include,origin of the food component, time and location of the harvesting orproduction, time, location and environmental conditions such astemperature and humidity while the food is stored or transported,identities of operators or entities being in control of the foodcomponent, processing steps and machines to which the food componentshas been exposed, and the like.

The material data package comprised in the food data transaction maycomprise a transaction stored in the packaged food production hash treeand the machine data processing unit is operable to verify the materialdata package with the packaged food production hash tree before creatingthe data transaction. To keep the data content of the food productiondata hash tree as complete and traceable as possible, it is advantageousthat the hash tree further comprises data transactions relating to thefood safety relevant events from the lifecycle of the packaging materialused to manufacture the package into which the food filled by the foodpackaging machine. As used herein, the term “data transactions relatingto the food safety relevant events” refers to any data transaction thatcomprises data from any event from the first production of any componentof the packaging material to the filling of food into the package in thefood packaging machine. Such data include, origin of the packagingmaterial component, time and location of the harvesting or production,time, location and environmental conditions such as temperature andhumidity while the packaging material component is stored ortransported, identities of operators or entities being in control of thepackaging material component, processing steps and machines to which thepackaging components has been exposed such as the final laminationprocess when producing a laminated packaging material, and the like.

In another aspect, the present invention provides a method for trackingfood data transactions in a network data processing system wherein thenetwork data processing system is further operably connected to a secondhardware data processor in a second food packaging machine. The secondfood packaging machine comprises a second packaging material supplymodule, a second food supply module, and a second filling module. Thesecond filling module being operable to form a second package frompackaging material supplied by the package material supply module, tofill food supplied by the second food supply module into the secondformed package, to seal the second filled package, and to output thesecond sealed, formed, and filled package.

The method further comprises the step of the network data processingsystem receiving a second food data transaction from the second hardwaredata processor in the second food packaging machine. The second fooddata transaction being derived from data comprises a time stampindicative of the time at which the second filling module filled thesupplied food into the second formed package and then sealed the secondpackage, a machine data record identifying the second filing module orthe second food packaging machine, all or part of a second packagingmaterial data record indicative of the packaging material batch usingwhich the second package is formed, all or part of a food data recordindicative of the food batch filled into the second formed package. Themethod further comprises the step of the network data processing systemappending the second food data transaction to the packaged foodproduction data hash tree.

With reference to the exemplary embodiment of the method shown in FIG.3, the method 3000 for tracking data in a food packaging machinecomprises the step 3010 of the network data processing system readingfrom one of the network storage devices a packaged food production datahash tree. The method comprises the step 3021 of the network dataprocessing system receiving a first food data transaction from the firsthardware data processor. The first food data transaction comprises afirst time stamp indicative of the time at which the first fillingmodule filled the supplied food into the first formed package and thensealed the first package, a first machine data record identifying thefirst filing module or the first food packaging machine, all or part ofa first packaging material data record indicative of the packagingmaterial batch using which the first formed package is formed, and allor part of a first food data record indicative of the food batch filledinto the first formed package. The method comprises the step 3022 of thenetwork data processing system receiving a second food data transactionfrom the second hardware data processor. The second food datatransaction comprises a second time stamp indicative of the time atwhich the second filling module filled the supplied food into the secondformed package and then sealed the second package, a second machine datarecord identifying the second filing module or the second food packagingmachine, all or part of a second packaging material data recordindicative of the packaging material batch using which the second formedpackage is formed, and all or part of a second food data recordindicative of the food batch filled into the second formed package. Themethod comprises the step 3031 of the network data processing systemappending the first food data transaction to the packaged foodproduction data hash tree. The method comprises the step 3032 of thenetwork data processing system appending the second food datatransaction to the packaged food production data hash tree. The methodcomprises the step 1040 of the network data processing system causingdecentralised storage of identical instances of the appended packagedfood production data hash tree in the plurality of network storagedevices.

In another aspect, the present invention provides a method for trackingfood data transactions in a network data processing system wherein themethod further comprises the step of the network data processing systemcreating a food data transaction block derived from all or part of thefirst food data transaction and from all or part of the second food datatransaction. The steps of appending the first and the second food datatransaction to the packaged food production data hash tree are performedby a step of appending the food data transaction block to the packagedfood production data hash tree. As used herein, the term “food datatransaction block” refers to a block of data which is derived from allor part of a first food data transaction and from all or part of thesecond food data transaction and which is protected against tamperingwith the data of the first food data transaction and the data of thesecond food data transaction. Such protection may be achieved forexample by adding a cryptographic hash of the combined data of the firstfood data transaction and the second food data transaction.

With reference to the exemplary embodiment of the method shown in FIG.4, the method 4000 now comprises, when compared to the method 3000 inFIG. 3, the additional step 4050 of the network data processing systemcreating a food data transaction block derived from all or part of thefirst food data transaction and from all or part of the second food datatransaction. The steps of appending the first and the second food datatransaction to the packaged food production data hash tree are performedby a step 4030 of appending the food data transaction block to thepackaged food production data hash tree. The additional step 4050 may becarried after steps 3021 and 3032 of the network data processing systemreceiving a food data transaction from the first and second hardwaredata processor. The additional step 4050 may be carried prior to orafter step 4030.

In another aspect, the present invention provides a method for trackingfood data transactions in a first network data processing system thefirst network data processing system is operably connected to a second anetwork data processing system separate from the first a network dataprocessing system. The second network data processing system is operablyconnected to the hardware data processor in the food packaging machine.The second network data processing system is operable to read from oneof the network storage devices the packaged food production data hashtree, to receive the food data transaction from the hardware dataprocessor, to append a food data transaction to the packaged foodproduction data hash tree, and to cause decentralised storage ofidentical instances of the packaged food production data hash tree inthe network storage devices. The method further comprises the step ofthe first network data processing system agreeing with the secondnetwork data processing system on the food data transaction to beappended to the packaged food production data hash tree. The step ofagreeing may precede the step of causing decentralised storage ofidentical instances of the packaged food production data hash tree inthe network storage devices. Agreement between the first and secondnetwork data processing systems may be achieved before, during, or afterthe food data transaction is appended to the packaged food productiondata hash tree.

With reference to the exemplary embodiment of the method shown in FIG.5, the method 5000 now comprises, in comparison to method 1000 shown inFIG. 1, the additional step S050 of the first network data processingsystem agreeing with the second network data processing system on thefood data transaction to be appended to the packaged food productiondata hash tree. The additional step S050 may be carried after step 1020of the network data processing system receiving a food data transactionfrom the hardware data processor. The additional step S050 may becarried prior to step 1030 of the network data processing systemappending the food data transaction to the packaged food production datahash tree.

The method may alternatively comprise the step of the step of the firstnetwork data processing system agreeing with the second network dataprocessing system on the packaged food production data hash tree afterthe food data transaction has been appended to the packaged foodproduction data hash tree independently by the first and second networkdata processing systems. The appended packaged food production data hashtree may only be stored in the network storage device once the agreementbetween first and second network data processing system has beenascertained. If no such agreement can be ascertained, the network dataprocessing systems may initiate an action such as sending a notificationmessage to the operator of the network data processing system or may adda flag to the packaged food production data hash tree indicating thatfor this food data transaction no agreement between the first and thesecond network data processing systems could be ascertained.

In another aspect, the present invention provides a method for trackingfood data transactions in a first network data processing system whereinthe step of the first network data processing system agreeing with thesecond network data processing system on the food data transaction to beappended to the packaged food production data hash tree comprises thefirst network data processing system and the second network dataprocessing system both operating according to a joint consensusmechanism. The step of agreeing according to the consensus algorithm maybe carried out between the first and second network data processingsystems may be achieved before, during, or after the food datatransaction is appended to the packaged food production data hash tree.

The step of the first network data processing system agreeing with thesecond network data processing system on the food data transaction to beappended to the packaged food production data hash tree may comprisevalidating and/or verifying a food data transaction block of receivedfood data transactions. Verifying may comprise verifying integrity ofthe food data transaction block. Validating a food data transactionblock of received food data transactions may comprise comparing a fooddata transaction block of received food data transactions derived by thefirst network data processing system with a food data transaction blockof received food data transactions derived by the second network dataprocessing system.

The first network data processing system and the second network dataprocessing unit system may each be operable to agree by validating theblocks of received data transactions (e.g. by comparison).

The first network data processing system and the second network dataprocessing unit system may each be operable according to a jointconsensus mechanism to append blocks of received data transactions tothe packaged food production data hash tree and to store identicalinstances of the appended data hash tree decentrally in the networkstorage devices. As used herein, the term “joint consensus mechanism”refers to a mechanism able to ensure with the defined level of certaintythat the appended hash tree created by each of the first and the secondnetwork data processing devices is identical, confirms to thepredetermined rules of the hash tree, and that this appended hash treeis then sent to and saved in the network storage devices.

The defined level of certainty of the joint consensus mechanism maycomprise a defined level of safety which may be defined by a definedportion of the network data processing systems computing identical hashtrees. Each network data processing system may operable to append thehash tree such the appended hash tree comprises information identifyingthe other participating network data processing systems which havecomputed an identical appended hash tree.

The defined level of certainty of the joint consensus mechanism maycomprise a defined level of liveness which may be defined by a definedportion of the network data processing systems having eventuallycomputed an appended hash tree. Each network data processing system mayoperable to append the hash tree such the appended hash tree comprisesinformation identifying the other participating network data processingsystems which have computed an appended hash tree after a predefinedamount of time.

The defined level of certainty of the joint consensus mechanism maycomprise a defined level of fault tolerance. The defined level of faulttolerance may comprise a defined level of fault tolerance fornon-participating network data processing systems. Thesenon-participating may have stopped functioning or the communicationbetween the affected system has been interrupted. The defined level offault tolerance may comprise a defined level of fault tolerance forByzantine faults where the participating network data processing systemprovides an appended hash tree that is erratically deviating from theexpected appended hash tree.

Several suitable consensus mechanisms are known in the art which arebased on hardware processors carrying out dedicated instruction setsincluding without limitation Proof-of-Work, Proof-of State,Proof-of-Elapsed Time, Practical Byzantine Fault Tolerance, SIEVE,Cross-Fault Tolerance (XFT), Federated Byzantine Agreement (such asRipple Consensus Protocol Algorithm and Stellar Consensus Protocol), andthe Swirlds Hashgraph Consensus Algorithm.

Retroactive recreation or modification of such a packaged foodproduction hash tree thus requires access to a majority of the networkprocessing devices in an attempt to overcome the protection through theconsensus algorithm. The network data processing systems may be placedat different, preferably widely separated, more preferably additionallyindependently protected against unauthorized physical and remote access.Identical instances of the appended packaged food production hash treemay be stored decentrally in the network storage devices. The foodsafety data of each local machine can thus be verified with reference tothe locally stored packaged food production hash tree. The locallystored packaged food production hash tree may, as a second step ofverification, be compared to the packaged food production hash treesstored on network storage devices associated with at least one,preferably a plurality of other machines. These other machines may belocated at sites separated from the location of the first food packagingmachine and may be protected by independent and different accessprotection systems. Retroactively modifying the packaged food productionhash tree would thus require gaining access to at least a majority ofthe network storage devices.

In another aspect, the present invention provides a method for trackingfood data transactions in a first network data processing system whereinthe first network data processing system is operably connected to asecond a network data processing system separate from the first anetwork data processing system. The second network data processingsystem is operably connected to the first hardware data processor in thefirst food packaging machine and to the second hardware data processorin the second food packaging machine. The second network data processingsystem is operable to read from one of the network storage devices thepackaged food production data hash tree, to receive the first food datatransaction from the hardware data processor, to receive the second fooddata transaction from the second hardware data processor, to append thefirst and the second food data transactions to the packaged foodproduction data hash tree, and to cause decentralised storage ofidentical instances of the packaged food production data hash tree inthe network storage devices. The method further comprises the step ofthe first network data processing system agreeing with the secondnetwork data processing system on the first and second food datatransactions to be appended to the packaged food production data hashtree. The step of agreeing may precede the step of causing decentralisedstorage of identical instances of the packaged food production data hashtree in the network storage devices. Agreement between the first andsecond network data processing systems may be achieved before, during,or after the food data transaction is appended to the packaged foodproduction data hash tree.

The method may comprise a step of creating food data transaction blockfrom the all or part of the first food data transaction and from all orpart of the second food data transaction.

With reference to the exemplary embodiment of the method shown in FIG.6, the method 6000 now comprises, when compared to the method 4000 inFIG. 4, the additional step 6060 of the first network data processingsystem agreeing with the second network data processing system on thefirst and second food data transactions to be appended to the packagedfood production data hash tree. The steps of appending the first and thesecond food data transaction to the packaged food production data hashtree are performed by a step 4030 of appending the food data transactionblock to the packaged food production data hash tree. The additionalstep 6060 may be carried after steps 3021 and 3032 of the network dataprocessing system receiving a food data transaction from the first andsecond hardware data processor. The additional step 4050 may be carriedprior to or after step 4030.

In another aspect, the present invention provides a method for trackingfood data transactions in a first network data processing system whereinthe step of the first network data processing system agreeing with thesecond network data processing system on the first and second food datatransactions to be appended to the packaged food production data hashtree comprises the first network data processing system and the secondnetwork data processing system both operating according to a jointconsensus mechanism. The step of agreeing according to the consensusalgorithm may be carried out between the first and second network dataprocessing systems may be achieved before, during, or after the fooddata transaction is appended to the packaged food production data hashtree.

In another aspect, the present invention provides a method for trackingfood data transactions in a network data processing system wherein themethod further comprises the step of the first network data processingsystem creating a food data transaction block derived from all or partof the first food data transaction and from all or part of the secondfood data transaction. The steps of the first network data processingsystem appending the first and the second food data transaction to thepackaged food production data hash tree are performed by a step of thefirst network data processing system appending the food data transactionblock to the packaged food production data hash tree.

In another aspect, the present invention provides a network dataprocessing system operably connected to a hardware data processor in afood packaging machine. The food packaging machine comprises a packagingmaterial supply module, a food supply module, and a filling module. Thefilling module being operable to form a package from packaging materialsupplied by the package material supply module, to fill food supplied bythe food supply module into the formed package, to seal the filledpackage, and to output the sealed, formed, and filled package. Thenetwork data processing system operably connected to a plurality ofseparate network storage devices wherein the network data processingsystem is adapted to execute the steps of the method for tracking fooddata transactions according to the present invention.

In FIG. 7, an exemplary embodiment of a network data processing systemaccording to the present invention is shown. The network data processingsystem 150 is operably connected to a hardware data processor 140 in afood packaging machine 100. The food packaging machine 100 comprises apackaging material supply module 110, a food supply module 120, and afilling module 130. The food packaging machine further comprises ahardware data processor 140 which is operably connected to the packagingmaterial supply module 110 and the food supply module 120. The hardwaredata processor 140 is operably connected to the network data processingsystem 150. The network data processing system 150 is further connectedto a plurality of separate network storage devices 161 and 162.

The hardware data processor may be further operably connected to thefilling module to receive a filling data record indicative of at leastone operational parameter of the filling module. In FIG. 8, an exemplaryembodiment of a network data processing system according to the presentinvention is shown. The food packaging machine 100 comprises a packagingmaterial supply module 110, a food supply module 120, and a fillingmodule 130. The food packaging machine further comprises a hardware dataprocessor 140 which is operably connected to the packaging materialsupply module 110, the food supply module 120, and to filling module130. The hardware data processor 140 is operably connected to thenetwork data processing system 150. The network data processing system150 is further connected to a plurality of separate network storagedevices 161 and 162.

In FIG. 8, an exemplary embodiment of a network data processing systemaccording to the present invention is shown. The food packaging machine100 comprises a packaging material supply module 110, a food supplymodule 120, and a filling module 130. The food packaging machine furthercomprises a hardware data processor 140 which is operably connected tothe packaging material supply module 110, the food supply module 120,and to filling module 130. The hardware data processor 140 is operablyconnected to a network data processing system 150. The network dataprocessing system 150 is further connected to a plurality of separatenetwork storage devices 161 and 162.

In another aspect, the present invention provides a network dataprocessing system wherein the food packaging machine further comprisesone of the network storage devices. When the network storage device isarranged locally, it is possible advantage to access the packaged foodproduction data hash tree. Another possible advantage is that thenetwork storage devices can be governed by the same physical andelectronic access restriction as the food packaging machine and thehardware data processor.

In another aspect, the present invention provides a network dataprocessing system according to the present invention further operablyconnected to a second hardware data processor in a second food packagingmachine. The second food packaging machine comprises a packagingmaterial supply module, a food supply module, and a filling module. Thesecond filling module is operable to form a package from packagingmaterial supplied by the packaging material supply module, to fill foodsupplied by the food supply module into the package, to seal the filledpackage, and to output the sealed, formed, and filled package. Thenetwork data processing system according is further operably connectedto a plurality of separate network storage devices. The network dataprocessing system is adapted to execute the steps of the method fortracking food data transactions according to the present invention.

In FIG. 9, an exemplary embodiment of a network data processing systemaccording to the present invention is shown. A first food packagingmachine 101 comprises a packaging material supply module 111, a foodsupply module 121, and a filling module 131. The food packaging machinefurther comprises a hardware data processor 141 which is operablyconnected to the packaging material supply module 111, the food supplymodule 121, and to filling module 131. A second food packaging machine102 comprises a packaging material supply module 112, a food supplymodule 122, and a filling module 132. The second food packaging machinefurther comprises a hardware data processor 142 which is operablyconnected to the packaging material supply module 112, the food supplymodule 122, and to filling module 132. Both the hardware data processor141 of the first food packaging machine 101 and the hardware dataprocessor 142 of the second food packaging machine 102 are operablyconnected to the network data processing system 150 The network dataprocessing system 150 is further connected to a plurality of separatenetwork storage devices 161 and 162.

In another aspect, the present invention provides a network dataprocessing system operably connected to a plurality of food packagingmachines. The machine hardware data processor unit of each foodpackaging machine may be operably connected to the network dataprocessing system. The network data processing system may be operablyconnected to a plurality of network storage devices. In the setup withat least, preferably at least 10, more preferably at least 100, foodpackaging machines, the hardware processors of which are connected tothe same network processing device, it is possible for the network dataprocessing to create a packaged food production hash tree comprisingdata transactions being received from each of the connected foodpackaging machines. These data transaction may be intertwined with eachother such as by including a hash value of at least two combined datatransactions, each being received from a different food packagingmachine. The network data processing system may be located at a sitedifferent from the sites where the food packaging machines are located.The access protection to the network data processing system may bedifferent and potentially more stringent than the access protectionapplied at each of the food packaging machines including the networkstorage devices comprised in them. It is thus possible for one entity tocontrol the creation of the packaged food production hash tree becausethe set of instructions for creating the hash tree only needs to bestored in the network data processing system which carries out theinstruction. The set of instruction can thus be kept secret from theoperators of the food packing machines. While creating the packaged foodproduction hash tree, the network data processing system may create aseries of random numbers which are integrated into the packaged foodproduction hash tree and thus form part of the hash values in the hashtree. Without knowledge of these series of random numbers, the packagedfood production hash tree can thus not be recreated. For retroactivelymodifying the packaged food production hash tree, access to the seriesof random numbers which could also be kept secret away from the packagedfood production hash tree would be required.

In another aspect, the present invention provides a network dataprocessing system operably connected to a plurality of food packagingmachines wherein each of the food packaging machines comprises one ofthe network storage device. By having the food packaging machinescomprises one network storage device each, it is possible to have thelocation of the network storage devices be as diverse as the locationsof the food packaging machines. The protection of the network storagedevices may thus be the same as that for the food packaging machinewhich is connected to the network data processing devices. The systemfor packaging food may comprise a plurality of preferably at least 10,more preferably at least 100, food packaging machines whereby each ofthe food packaging machines comprises one network storage device.Consequently, each food packing machine contributing its data to thepackaged food production hash tree also has a local copy of the hashtree. The food safety data of each local machine can thus be verifiedwith reference to the locally stored packaged food production hash tree.The locally stored packaged food production hash tree may, as a secondstep of verification, be compared to the packaged food production hashtrees stored on network storage devices associated with at least one,preferably a plurality of other machines. These other machines may belocated at sites separated from the location of the first food packagingmachine and may be protected by independent and different accessprotection systems. Retroactively modifying the packaged food productionhash tree would thus require gaining access to at least a majority ofthe network storage devices.

In another aspect, the present invention provides a network dataprocessing system wherein the network data processing system is furtheroperably connected to a second a network data processing system separatefrom the first a network data processing system and wherein the networkdata processing system is adapted to execute the steps of the method fortracking food data transactions according to the present invention.

Providing a second network data processing system allows to process datasent by a hardware data processor at least two different location andpotentially independent of each other. The redundancy can be used toavoid a system failure in case one of the network data processingsystems fails or is unavailable. The redundancy can be used to providedworkload balancing between the network data processing systems. Networkdata processing systems can be used in a predetermined sequence orrandom sequence determined ad-hoc by an external entity or one of thenetwork data processing systems.

The second network data processing system may be operably connected tothe plurality of network storage devices. This configuration allows forthe decentralized storage of the data produced by the second networkdata processing system.

The second network data processing unit each may be operable to readfrom one of the network storage devices a second packaged foodproduction data hash tree. The second network data processing unit eachmay be operable to append blocks of received data transactions to thesecond packaged food production data hash tree. The second network dataprocessing unit each may be operable to cause decentralised storage ofidentical instances of the first and second packaged food productiondata hash trees are stored in the network storage devices.

It is further possible to have the at least two network data processingsystems perform the same processing of the data provided by the hardwaredata processor of the food packaging machine so that the results can becompared. The comparison of the resulting data allows to identifywhether one network data processing system has been compromised. Beingable to identify compromised data is relevant for rendering food safetydata tamper-proof. Having more than one, preferably a large number of,network data processing systems would require an attacker to gaincontrol over all the systems in an attempt to modify all data. An attackcould be identified as soon as the data produced by one network dataprocessing system deviates from the data produced by another networkdata processing system.

The first and the second network data processing unit may be operablyconnected to the same plurality of network storage devices or to twodifferent sets of network storage devices.

In FIG. 10, an exemplary embodiment of a network data processing systemaccording to the present invention is shown. The food packaging machine100 comprises a packaging material supply module 110, a food supplymodule 120, and a filling module 130. The food packaging machine furthercomprises a hardware data processor 140 which is operably connected tothe packaging material supply module 110, the food supply module 120,and to filling module 130. The hardware data processor 140 is operablyconnected to a first network data processing system 151 and to a secondnetwork data processing system 152. The first network data processingsystems 151 is further connected to a plurality of separate networkstorage devices 161 and 162. The second network data processing systems152 is further connected to a plurality of separate network storagedevices 163 and 164.

In FIG. 11, an exemplary embodiment of a network data processing systemaccording to the present invention is shown. The food packaging machine100 comprises a packaging material supply module 110, a food supplymodule 120, and a filling module 130. The food packaging machine furthercomprises a hardware data processor 140 which is operably connected tothe packaging material supply module 110, the food supply module 120,and to filling module 130. The hardware data processor 140 is operablyconnected to a first network data processing system 151 and to a secondnetwork data processing system 152. Each of the network data processingsystems 151 and 152 is further connected to a plurality of separatenetwork storage devices 161 and 162.

In FIG. 12, an exemplary embodiment of network data processing systemaccording to the present invention is shown. The first food packagingmachine 101 comprises a packaging material supply module 111, a foodsupply module 121, and a filling module 131. The food packaging machinefurther comprises a hardware data processor 141 which is operablyconnected to the packaging material supply module 111, the food supplymodule 121, and to filling module 131. The second food packaging machine102 comprises a packaging material supply module 112, a food supplymodule 122, and a filling module 132. The food packaging machine furthercomprises a hardware data processor 142 which is operably connected tothe packaging material supply module 112, the food supply module 122,and to filling module 132. Both the hardware data processor 141 of thefirst food packaging machine 101 and the hardware data processor 142 ofthe second food packaging machine 102 are operably connected to anetwork data processing system 150 The network data processing system150 is further connected to a plurality of separate network storagedevices 161 and 162. The first food packaging machine 101 comprises thefirst network storage device 161. The second food packaging machine 102comprises the second network storage device 162.

Each of the food packaging machines in the plurality of food packagingmachines may comprise a network data processing system and a networkstorage device. Each of the network data processing systems can thus beprotected with the same access control that is protecting also the foodpackaging machine and the network storage device comprised in the samemachine. Each of the hardware data processors in the food packagingmachines may be operably connected to each one of the network dataprocessing means. The operable connection be direct or may be indirect,such as via one or more of the other network data processing systems.The network data processing systems may be operable to distribute thereceived data among each of the other network data processing systems.Each of the hardware data processors may be directly and operablyconnected to the network data processing system comprised in the samefood packaging machine as the hardware data processor. The network dataprocessing units may be operably connected to the network storagedevices.

In another aspect, the present invention provides a computer programcomprising instructions which cause a network data processing systemaccording to the present invention to carry out the steps of the methodfor tracking food data transactions in a network data processing systemaccording to the present invention.

Embodiments of methods and products (network data processing system)according to the disclosure are set out in the following items:

Item 1.

A method for tracking food data transactions in a network dataprocessing system (150)

characterized in that

-   -   the network data processing system is operably connected to a        hardware data processor (140) in a food packaging machine (100),        -   the food packaging machine comprising            -   a packaging material supply module (110),            -   a food supply module (120),            -   a filling module (130);        -   the filling module being operable to            -   form a package from packaging material supplied by the                packaging material supply module,            -   fill food supplied by the food supply module into the                package,            -   seal the filled package,            -   output the sealed, formed, and filled package;    -   the network data processing system being operably connected to a        plurality of separate network storage devices (161, 162);        and in that        the method comprises the steps of the network data processing        system    -   reading from one of the network storage devices a packaged food        production data hash tree,    -   receiving a food data transaction from the hardware data        processor, the food data transaction being derived from data        comprising        -   a time stamp indicative of the time at which the filling            module filled the supplied food into the formed package and            then sealed the package,        -   a machine data record identifying the filing module or the            food packaging machine,        -   all or part of a packaging material data record indicative            of the packaging material batch using which the formed            package is formed,        -   all or part of a food data record indicative of the food            batch filled into the formed package;    -   appending the food data transaction to the packaged food        production data hash tree,    -   causing decentralised storage of identical instances of the        appended packaged food production data hash tree in the        plurality of network storage devices.

Item 2.

A method for tracking food data transactions in a network dataprocessing system (150) according to Item 1

whereinthe food data transaction is further derived from data comprising all orpart of the filling data record, the filling data record beingindicative of at least one operational parameter of the filling moduleduring filling the supplied food into the formed package.

Item 3.

A method for tracking food data transactions in a first network dataprocessing system (150) according to any of Items 1 to 2,

whereinthe packaged food production data hash tree is a distributed ledger.

Item 4.

A method for tracking food data transactions in a network dataprocessing system (150) according to any of Items 1 to 3

whereinthe packaged food production data hash tree is a blockchain.

Item 5.

A method for tracking food data transactions in a network dataprocessing system (150) according to any of Items 1 to 4

whereinthe packaged food production data hash tree is a semi-public blockchain.

Item 6.

A method for tracking food data transactions in a network dataprocessing system (150) according to any of Items 1 to 5

whereinthe method further comprises the step of the network data processingsystem verifying all or part of the food data transaction received fromhardware data processor with a second food data transaction comprised inthe packaged food production data hash tree read from the networkstorage device.

Item 7.

A method for tracking food data transactions in a network dataprocessing system (150) according to any of Items 1 to 6

whereinthe network data processing system is further operably connected to asecond hardware data processor (142) in a second food packaging machine(102),

-   -   the second food packaging machine comprising        -   a second packaging material supply module (110),        -   a second food supply module (120),        -   a second filling module (130),    -   the second filling module being operable to        -   form a second package from packaging material supplied by            the package material supply module        -   fill food supplied by the second food supply module into the            second formed package        -   seal the second filled package        -   output the second sealed, formed, and filled package            and wherein            the method further comprises the steps of the network data            processing system    -   receiving a second food data transaction from the second        hardware data processor in the second food packaging machine,        the second food data transaction being derived from data        comprising        -   a time stamp indicative of the time at which the second            filling module filled the supplied food into the second            formed package and then sealed the second package,        -   a machine data record identifying the second filing module            or the second food packaging machine,        -   all or part of a second packaging material data record            indicative of the packaging material batch using which the            second package is formed,        -   all or part of a food data record indicative of the food            batch filled into the second formed package;    -   appending the second food data transaction to the packaged food        production data hash tree.

Item 8.

A method for tracking food data transactions in a network dataprocessing system (150) according to any of Item 9

whereinthe method further comprises the step of the network data processingsystem

-   -   creating a food data transaction block derived from all or part        of the first food data transaction and from all or part of the        second food data transaction and wherein        the steps of appending the first and the second food data        transaction to the packaged food production data hash tree are        performed by a step of appending the food data transaction block        to the packaged food production data hash tree.

Item 9.

A method for tracking food data transactions in a first network dataprocessing system (151) according to any of Item 1 to Item 6

whereinthe first network data processing system is operably connected to asecond a network data processing system (152) separate from the first anetwork data processing systemand whereinthe second network data processing system is operably connected to thehardware data processor (140) in the food packaging machine (100)and whereinthe second network data processing system is operable to

-   -   read from one of the network storage devices the packaged food        production data hash tree    -   receive the food data transaction from the hardware data        processor    -   append a food data transaction to the packaged food production        data hash tree,    -   cause decentralised storage of identical instances of the        packaged food production data hash tree in the network storage        devices,        and wherein        the method further comprises the step of the first network data        processing system agreeing with the second network data        processing system on the food data transaction to be appended to        the packaged food production data hash tree,        the step of agreeing preceding the step of the first network        data processing system appending a food data transaction to the        packaged food production data hash tree.

Item 10.

A method for tracking food data transactions in a first network dataprocessing system (151) according to Item 9,

whereinthe step of the first network data processing system agreeing with thesecond network data processing system (152) on the food data transactionto be appended to the packaged food production data hash tree comprisesthe first network data processing system and the second network dataprocessing system both operating according to a joint consensusmechanism.

Item 11.

A method for tracking food data transactions in a first network dataprocessing system (151) according to any of Item 7 to Item 8

whereinthe first network data processing system is operably connected to asecond a network data processing system (152) separate from the first anetwork data processing systemand whereinthe second network data processing system is operably connected to thefirst hardware data processor (140) in the first food packaging machine(100) and to the second hardware data processor (140) in the second foodpackaging machine (100)and whereinthe second network data processing system is operable to

-   -   read from one of the network storage devices the packaged food        production data hash tree    -   receive the first food data transaction from the hardware data        processor    -   receive the second food data transaction from the second        hardware data processor    -   append the first and the second food data transactions to the        packaged food production data hash tree,    -   cause decentralised storage of identical instances of the        packaged food production data hash tree in the network storage        devices,        and wherein        the method further comprises the step of the first network data        processing system agreeing with the second network data        processing system on the first and second food data transactions        to be appended to the packaged food production data hash tree,        the step of agreeing preceding the step of the first network        data processing system appending a food data transaction to the        packaged food production data hash tree.

Item 12.

A method for tracking food data transactions in a first network dataprocessing system (150) according to any of Item 9 or 10,

whereinthe step of the first network data processing system agreeing with thesecond network data processing system on the first and second food datatransactions to be appended to the packaged food production data hashtree comprises the first network data processing system and the secondnetwork data processing system both operating according to a jointconsensus mechanism.

Item 13.

A method for tracking food data transactions in a network dataprocessing system (150) according to Item 12

whereinthe method further comprises the step of the first network dataprocessing system creating a food data transaction block derived fromall or part of the first food data transaction and from all or part ofthe second food data transactionand whereinthe steps of the first network data processing system appending thefirst and the second food data transaction to the packaged foodproduction data hash tree are performed by a step of the first networkdata processing system appending the food data transaction block to thepackaged food production data hash tree.

Item 14.

A network data processing system (150) operably connected to

-   -   a hardware data processor (140) in a food packaging machine        (100)        -   the food packaging machine comprising            -   a packaging material supply module (110),            -   a food supply module (120),            -   a filling module (130),        -   the filling module being operable to            -   form a package from packaging material supplied by the                package material supply module            -   fill food supplied by the food supply module into the                formed package            -   seal the filled package            -   output the sealed, formed, and filled package    -   a plurality of separate network storage devices (161, 162)        wherein the network data processing system is adapted to execute        the steps of the method for tracking food data transactions        according to any of Items 1 to 6.

Item 15.

A computer program comprising instructions which cause the network dataprocessing system according to Items 14 to carry out the steps of themethod according to any of Items 1 to 6.

Item 16.

A network data processing system (150) according to Item 14 furtheroperably connected to

-   -   to a second hardware data processor (142) in a second food        packaging machine (102),        -   the second food packaging machine comprising            -   a packaging material supply module (110),            -   a food supply module (120),            -   a filling module (130),        -   the second filling module being operable to            -   form a package from packaging material supplied by the                packaging material supply module            -   fill food supplied by the food supply module into the                package            -   seal the filled package            -   output the sealed, formed, and filled package    -   a plurality of separate network storage devices (161, 162)        wherein the network data processing system is adapted to execute        the steps of the method for tracking food data transactions        according to any of Item 7 or 8.

Item 19.

A computer program comprising instructions to cause a network dataprocessing system according to Item 16 to execute the steps of themethod for tracking food data transactions according to any of Item 7 or8.

Item 18.

A network data processing system (150) according to Item 16

whereinthe network data processing system is further operably connected to asecond a network data processing system (152) separate from the first anetwork data processing systemand whereinthe network data processing system is adapted to execute the steps ofthe method for tracking food data transactions according to any of Items9 to 10

Item 19.

A computer program comprising instructions which cause the network dataprocessing system according to Items 18 to carry out the steps of themethod according to any of Items 9 to 10.

Item 20.

A network data processing system (150) according to Item 18whereinthe network data processing system is further operably connected to asecond a network data processing system (152) separate from the first anetwork data processing systemand whereinthe network data processing system is adapted to execute the steps ofthe method for tracking food data transactions according to any of Items11 to 13

Item 21

A computer program comprising instructions which cause the network dataprocessing system according to Items 20 to carry out the steps of themethod according to any of Items 11 to 13.

All variations and details described herein with reference to thenetwork data processing system of the present invention applyanalogously also to the method for tracking data food data transactionsin a network data processing system. All variations and detailsdescribed herein with reference to the method for tracking data fooddata transactions in a network data processing system of the presentinvention apply analogously also to the network data processing systemand the computer program comprising instructions.

1-18. (canceled)
 19. A method, performed by a network data processingsystem for tracking food data transactions, wherein the network dataprocessing system is configured to connect to a hardware data processorof a food packaging machine and to a plurality of separate networkstorage devices, wherein the food packaging machine comprises apackaging material supply module, a food supply module, a filling moduleoperable to: (a) form a package from packaging material supplied by thepackaging material supply module, (b) fill food supplied by the foodsupply module into the package, (c) seal the filled package, and (d)output the sealed and filled package, wherein the method comprises:reading from one of the network storage devices a packaged foodproduction data hash tree; receiving a first food data transaction fromthe hardware data processor, the first food data transaction beingderived from data comprising: a time stamp indicative of the time atwhich the filling module filled the supplied food into the formedpackage and sealed the package, a machine data record identifying atleast one of the filing module or the food packaging machine, at least aportion of a packaging material data record indicative of the packagingmaterial batch using which the formed package is formed, and at least aportion of a food data record indicative of the food batch filled intothe formed package; appending the first food data transaction to thepackaged food production data hash tree; causing decentralised storageof identical instances of the appended packaged food production datahash tree in the plurality of network storage devices.
 20. A method fortracking food data transactions in the network data processing systemaccording to claim 19 wherein: the first food data transaction isfurther derived from data comprising at least a portion of a fillingdata record, the filling data record being indicative of at least oneoperational parameter of the filling module during filling of the formedpackage.
 21. A method for tracking food data transactions in the networkdata processing system according to claim 19 wherein: the packaged foodproduction data hash tree is a distributed ledger.
 22. A method fortracking food data transactions in the network data processing systemaccording to claim 19 wherein: the packaged food production data hashtree is a blockchain.
 23. A method for tracking food data transactionsin the network data processing system according to claim 22 wherein: thepackaged food production data hash tree is a semi-public blockchain. 24.A method for tracking food data transactions in the network dataprocessing system according to claim 19, further comprising: verifyingat least a portion of the first food data transaction received from thehardware data processor with a second food data transaction comprised inthe packaged food production data hash tree read from the networkstorage device.
 25. A method for tracking food data transactions in thenetwork data processing system according to claim 19 wherein: thenetwork data processing system is further configured to connect to asecond hardware data processor in a second food packaging machine,wherein the second food packaging machine comprises a second packagingmaterial supply module, a second food supply module, a second fillingmodule operable to: (a) form a second package from packaging materialsupplied by the package material supply module, (b) fill food suppliedby the second food supply module into the second formed package, (c)seal the second filled package; and (d) output the second sealed andfilled package, wherein the method further comprises: receiving a secondfood data transaction from the second hardware data processor in thesecond food packaging machine, the second food data transaction beingderived from data comprising: a time stamp indicative of the time atwhich the second filling module filled the supplied food into the secondformed package and then sealed the second package, a machine data recordidentifying the second filing module or the second food packagingmachine, at least a portion of a second packaging material data recordindicative of the packaging material batch using which the secondpackage is formed, at least a portion of a food data record indicativeof the food batch filled into the second formed package; and appendingthe second food data transaction to the packaged food production datahash tree.
 26. A method for tracking food data transactions in thenetwork data processing system according to claim 19, furthercomprising: creating a food data transaction block derived from at leasta portion of a first food data transaction and from at least a portionof a second food data transaction; wherein appending the first and thesecond food data transaction to the packaged food production data hashtree are performed by appending the food data transaction block to thepackaged food production data hash tree.
 27. A method for tracking fooddata transactions in the network data processing system according toclaim 19, wherein: the network data processing system is a first networkdata processing system; wherein the first network data processing systemis configured to connect to a second network data processing systemseparate from the first network data processing system; the secondnetwork data processing system is configured to connect to the hardwaredata processor of the food packaging machine; the second network dataprocessing system is configured to: (a) read the packaged foodproduction data hash tree from one of the network storage devices, (b)receive the food data transaction from the hardware data processor, (c)append a food data transaction to the packaged food production data hashtree, (d) cause decentralised storage of identical instances of thepackaged food production data hash tree in the network storage devices;and wherein the method further comprises: determining, by the firstnetwork data processing system, an agreement with the second networkdata processing system on the food data transaction to be appended tothe packaged food production data hash tree; after the determining,appending, by the first network data processing system, a food datatransaction to the packaged food production data hash tree.
 28. A methodfor tracking food data transactions in a first network data processingsystem according to claim 27 wherein: determining an agreement by thefirst network data processing system with the second network dataprocessing system on the food data transaction to be appended to thepackaged food production data hash tree comprises the first network dataprocessing system and the second network data processing system bothoperating according to a joint consensus mechanism.
 29. A method fortracking food data transactions according to claim 28, wherein: thedetermining an agreement comprises operating according to the jointconsensus mechanism, wherein: the joint consensus mechanism isconfigured to ensure with a defined level of certainty that the appendedhash tree created by each of the first network data processing systemand the second data processing system are identical.
 30. A method fortracking food data transactions in a first network data processingsystem according to claim 25 wherein: the first network data processingsystem is configured to connect to a second network data processingsystem separate from the first a network data processing system; whereinthe second network data processing system is configured to connect tothe first hardware data processor in the first food packaging machineand to the second hardware data processor in the second food packagingmachine; wherein the second network data processing system is configuredto: read from one of the network storage devices the packaged foodproduction data hash tree; receive the first food data transaction fromthe hardware data processor; receive the second food data transactionfrom the second hardware data processor; append the first and the secondfood data transactions to the packaged food production data hash tree;cause decentralised storage of identical instances of the packaged foodproduction data hash tree in the network storage devices; and whereinthe method further comprises: the first network data processing systemagreeing with the second network data processing system on the first andsecond food data transactions to be appended to the packaged foodproduction data hash tree; the agreeing preceding the first network dataprocessing system appending a food data transaction to the packaged foodproduction data hash tree.
 31. A method for tracking food datatransactions in a first network data processing system according toclaim 27, wherein the first network data processing system agreeing withthe second network data processing system on the first and second fooddata transactions to be appended to the packaged food production datahash tree comprises: the first network data processing system and thesecond network data processing system both operating according to ajoint consensus mechanism.
 32. A method for tracking food datatransactions in a network data processing system according to claim 31wherein: the method further comprises the step of the first network dataprocessing system creating a food data transaction block derived fromall or part of the first food data transaction and from at least aportion of the second food data transaction; and wherein the steps ofthe first network data processing system appending the first and thesecond food data transaction to the packaged food production data hashtree are performed by a step of the first network data processing systemappending the food data transaction block to the packaged foodproduction data hash tree.
 33. A network data processing systemconfigured to connect to a hardware data processor of a food packagingmachine, wherein the food packaging machine comprises: a packagingmaterial supply module; a food supply module; a filling module operableto (a) form a package from packaging material supplied by the packagematerial supply module, (b) fill food supplied by the food supply moduleinto the formed package, (c) seal the filled package, and (d) output thesealed package; and a plurality of separate network storage devices,wherein the network data processing system is configured to execute themethod for tracking food data transactions according to claim
 19. 34. Acomputer program comprising instructions which cause a network dataprocessing system to carry out the method according to claim
 19. 35. Anetwork data processing system according to claim 33, wherein thenetwork data processing system is operably connected to a secondhardware data processor in a second food packaging machine, wherein thesecond food packaging machine comprises: a second packaging materialsupply module; a second food supply module; a second filling moduleoperable to: (a) form a package from packaging material supplied by thesecond packaging material supply module, (b) fill food supplied by thesecond food supply module into the package, (c) seal the filled package,and (d) output the sealed package; a plurality of separate networkstorage devices wherein the network data processing system is configuredto execute the steps of the method for tracking food data transactionsaccording to claim
 25. 36. A network data processing system according toclaim 35 wherein: the network data processing system is further operablyconnected to a second a network data processing system separate from thefirst a network data processing system; and wherein: the network dataprocessing system is configured to execute the method according to claim27.